Several New Critical Flaws Affect CODESYS Industrial Automation Software

Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller PLC platform that could be remotely exploited to take control of a company's cloud operational technology OT infrastructure. The flaw...

CVE-2021-29240

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content...

CVE-2021-29240

CVE-2021-29240 affects the CODESYS Development System Package Manager prior to version 3.5.17.0, which does not verify the validity of packages before installation, enabling potentially malicious packages to be installed. Public sources (NVD, Red Hat advisory) describe this as an insufficient dat...